Commit Graph

3193 Commits

Author SHA1 Message Date
hongming
8fa36615e1 chore: simplify telemetry config (#6441)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-17 10:55:56 +08:00
hongming
12dec1558f deps: update go-jose to v4.0.5 (#6435) (#6438)
(cherry picked from commit d14884cb6d)

Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-14 17:46:52 +08:00
KubeSphere CI Bot
58b811ee92 fix: regression bugs (#6433)
fix: extension delete logic

Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: peng wu <2030047311@qq.com>
2025-03-14 14:25:51 +08:00
KubeSphere CI Bot
9d88c8d3a7 [release-4.1] Update util.go (#6424)
Update util.go

Signed-off-by: liujian <54946465+redscholar@users.noreply.github.com>
Co-authored-by: liujian <54946465+redscholar@users.noreply.github.com>
2025-03-12 18:44:49 +08:00
smartcat999
844b04613d fix: helm template error (#6419)
Signed-off-by: peng wu <2030047311@qq.com>
2025-03-11 17:57:49 +08:00
hongming
7da8954488 Merge pull request #6417 from wansir/release-4.1
Merge master into branch release-4.1
2025-03-11 14:49:59 +08:00
KubeSphere CI Bot
f96e76ef2a [kse-2286] replace storeCAFile use WithTLSConfig (#6400)
Signed-off-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
Co-authored-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
(cherry picked from commit afe1372bc3)
2025-03-11 14:36:00 +08:00
KubeSphere CI Bot
1b479a9084 [kse-2112] add extension version controller (#6399)
Signed-off-by: ks-ci-bot <ks-ci-bot@kubesphere.io>
Co-authored-by: ks-ci-bot <ks-ci-bot@kubesphere.io>

(cherry picked from commit 0556934ecc)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-11 14:35:20 +08:00
smartcat999
f1bb9d69ac fix: Fixed the issue where the user status was empty when the third-p… (#6379)
fix: Fixed the issue where the user status was empty when the third-p… (#2258)

* fix: Fixed the issue where the user status was empty when the third-party login user logged in manually for the first time

* fix: Fixed the issue where the user status was empty when the third-party login user logged in manually for the first time

---------

Signed-off-by: peng wu <2030047311@qq.com>
(cherry picked from commit 8056d176f8)
2025-03-11 14:32:29 +08:00
smartcat999
e7c97d3a56 Fix dependency cves (#6353)
* Upgraded golang.org/x/crypto v0.28.0 => v0.31.0.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded golang.org/x/net v0.30.0 => v0.33.0.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded github.com/golang/glog v1.2.2 => v1.2.4. Fix CVE-2024-45339.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgrade go stdlib from 1.22.8 to 1.22.11. Fix CVE-2024-45336.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded github.com/go-git/go-git/v5 v5.11.0 => v5.13.0. Fix CVE-2025-21613、CVE-2025-21614.

Signed-off-by: peng wu <2030047311@qq.com>

* Upgraded telemetry v1.0.1 => v1.0.2. Fix CVE-2024-45338、CVE-2024-34156、CVE-2024-34155、CVE-2024-34158、CVE-2024-4536、CVE-2024-45341.

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
(cherry picked from commit d38db0054c)
2025-03-11 14:29:20 +08:00
liujian
b34b7ea1fe fix: fix cve for telemetry and kubesphere (#6352)
fix: cve

Signed-off-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
(cherry picked from commit b4069c6b3d)
2025-03-11 14:27:52 +08:00
Wenhao Zhou
2dbe296a06 [application] add sortBy parameter versionName (#6333)
Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
(cherry picked from commit 7ce92c801a)
2025-03-11 14:26:34 +08:00
smartcat999
942d3be9d4 Fix workspacerole sync condition (#2142)
* fix: Fixed the issue that role and rolebinding do not trigger synchronization when binding a workspace to a cluster

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update goimports

Signed-off-by: peng wu <2030047311@qq.com>

* fix: update workspace sync condition && update list options

Signed-off-by: peng wu <2030047311@qq.com>

* fix: rename enqueue request map func for workspacerole and workspacerolebinding

Signed-off-by: peng wu <2030047311@qq.com>

* fix: workspace role sync logic

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit bc128dcf78)
2025-03-11 14:26:04 +08:00
hongming
114f5a6e79 fix: the problem of conflicting controller output logs caused by duplicate initialization of roles and workspace roles when the controller is started (#2139)
Signed-off-by: peng wu <2030047311@qq.com>
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 3d40b1905d)
2025-03-11 14:25:49 +08:00
hongming
c998029cd6 fix workspace role name exceeding the length limit (#2132)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 7a3a99cecb)
2025-03-11 14:25:10 +08:00
hongming
5613dc849c clean up unnecessary warning logs (#6323)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 255e9a228d)
2025-03-11 14:25:00 +08:00
KubeSphere CI Bot
659fe1e3cb fix helm executor serviceaccount not created (#1948)
Co-authored-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 6274978709)
2025-03-11 14:24:05 +08:00
hongming
b1a887fbb4 Replace vulnerable dependency gopkg.in/square/go-jose.v2 (#6290)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit fa7c1340e3)
2025-03-11 14:22:21 +08:00
liujian
4583b5a62e feat: create extensionVersions by depth (#6286)
* feat: create extensionVersions by depth

* Apply suggestions from code review

Signed-off-by: hongming <coder.scala@gmail.com>

* Apply suggestions from code review

Signed-off-by: hongming <coder.scala@gmail.com>

---------

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 9c962d3cbf)
2025-03-11 14:21:28 +08:00
inksnw
3b315a087d update workloadtemplates RoleTemplate (#6285)
(cherry picked from commit 637950c979)
2025-03-11 14:20:51 +08:00
hongming
39eab5ee5c update dependencies (#6267)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit cfebd96a1f)
2025-03-11 14:19:32 +08:00
Wenhao Zhou
742c1e52db feat: support listing cluster that user has the cluster`s rolebinding (#6259)
(cherry picked from commit c5e2800ab2)
2025-03-11 14:14:13 +08:00
Xinzhao Xu
64e054bde2 fix: cache checking always evaluates to true
(cherry picked from commit 6205e44817)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-11 14:13:57 +08:00
Wenhao Zhou
93369941e8 enhancement: disable redis when running as member cluster
Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>

(cherry picked from commit 4fa4f5b42d)
Signed-off-by: hongming <coder.scala@gmail.com>
2025-03-11 14:10:40 +08:00
hongming
168bb43cb1 chore: add helm release namespace check (#6315)
Signed-off-by: hongming <coder.scala@gmail.com>
(cherry picked from commit 65eb534ed9)
2025-03-11 14:05:36 +08:00
Xinzhao Xu
811cc0290e Support for configuring affinity for helm executor (#1989)
(cherry picked from commit e389253a4e)
2025-03-11 14:05:09 +08:00
hongming
0cf715a89a fix: unexpected HTTP status code (#6241)
fix: Update member cluster mirror service verification response infor… (#1992)

* fix: repository verify error

* Update pkg/kapis/resources/v1alpha3/handler.go

---------

Co-authored-by: smartcat999 <49057502+smartcat999@users.noreply.github.com>
(cherry picked from commit 7992b75072)
2025-03-11 13:58:21 +08:00
KubeSphere CI Bot
c75dc7969e [release-4.1] fix: update license-eye version to v0.6.0 (#6415)
fix: update license-eye version to v0.6.0

Co-authored-by: joyceliu <joyceliu@yunify.com>
2025-03-11 11:44:48 +08:00
KubeSphere CI Bot
bb60d39434 Support manual triggering of a repository update. (#6414)
* Support manual triggering of a repository update.

* cherry pick add api for workload template (#1982)

* cherry pick (add operator application (#1970))

* Modify routing implementation to improve readability

* cherry pick from kse dfc40e5adf5aa2e67d1

* Filter by Routing Parameter Namespace (#1990)

* add doc for workloadtemplates

---------

Co-authored-by: inksnw <inksnw@gmail.com>
2025-03-11 11:36:02 +08:00
KubeSphere CI Bot
c9c856dfda Fix conflict and cherry-pick (cherry-pick from #0e8c6d5) (#6413)
Fix conflict and cherry-pick (cherry-pick from #0e8c6d5)

Co-authored-by: inksnw <inksnw@gmail.com>
2025-03-11 11:22:58 +08:00
KubeSphere CI Bot
bb4c67f624 Refactor FormatVersion function to handle invalid characters (#6411)
* Refactor FormatVersion function to handle invalid characters

* Use SHA1 instead of MD5

---------

Co-authored-by: inksnw <inksnw@gmail.com>
2025-03-11 11:14:48 +08:00
KubeSphere CI Bot
3976d959b4 [release-4.1] Improve the readability of some codes (#6410)
Improve the readability of some codes

Co-authored-by: sologgfun <857949825@qq.com>
2025-03-11 11:06:48 +08:00
smartcat999
23e7e6d179 update ks-core helm chart (#6401) (#6407)
fix: cherrypick update ks-core helm chart



(cherry picked from commit 7e2cafd15b)

Signed-off-by: peng wu <2030047311@qq.com>
2025-03-11 10:41:48 +08:00
KubeSphere CI Bot
81c74f28d4 fix: incorrect redis config (#6405)
fix: incorrect redis config (#2130)

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-03-11 10:25:48 +08:00
KubeSphere CI Bot
e48875411d fix: replace user displayname with annotation (#6396)
Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: peng wu <2030047311@qq.com>
2025-03-06 18:04:43 +08:00
smartcat999
c0bf77e541 feat: platform config API (#6391)
feat: platform config API (#2052) (#6303)



(cherry picked from commit c1259aff8b)

Signed-off-by: hongming <coder.scala@gmail.com>
Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: hongming <hongming@kubesphere.io>
2025-03-05 11:09:41 +08:00
smartcat999
db7a21e754 feature: reduce telemetry dependence (#6390)
feature: reduce telemetry dependence. (#6276)

Signed-off-by: peng wu <2030047311@qq.com>
2025-03-05 10:34:42 +08:00
KubeSphere CI Bot
ddddbbe500 [release-4.1] fix ldaps protocol (#6388)
fix: ldap default protocol (#2156)

Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: smartcat999 <49057502+smartcat999@users.noreply.github.com>
2025-03-03 16:38:39 +08:00
KubeSphere CI Bot
c90729682f feat(auth): support multiple identity provider associations (#6381)
Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-03-03 16:28:39 +08:00
KubeSphere CI Bot
33152139d6 fix: During the creation of a workspace, it will be determined whethe… (#6387)
fix: During the creation of a workspace, it will be determined whethe… (#2147)

* fix: During the creation of a workspace, it will be determined whether the user has the authority to designate other users as administrators.



* fix: code update



* fix: Determine whether the user is a workspace administrator based on whether the user has the permission to delete the workspace



---------

Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: smartcat999 <49057502+smartcat999@users.noreply.github.com>
2025-03-03 16:22:39 +08:00
KubeSphere CI Bot
2ed005f1b1 fix: support LDAPS && STARTTLS (#6386)
Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: peng wu <2030047311@qq.com>
2025-03-03 16:05:39 +08:00
KubeSphere CI Bot
c9623f674c feat: add category for deepseek (#6383)
Signed-off-by: joyceliu <joyceliu@yunify.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
2025-02-28 17:08:37 +08:00
KubeSphere CI Bot
38fb2d0514 [release-4.1] fix: pod list with owner filter logic (#6371)
fix: pod list with owner filter logic

Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: peng wu <2030047311@qq.com>
2025-02-21 15:06:27 +08:00
smartcat999
1952b98ca8 fix cve with upgrade telemetry 1.0.2 and go 1.22.11 (#6367)
Signed-off-by: peng wu <2030047311@qq.com>
2025-02-14 11:21:19 +08:00
KubeSphere CI Bot
739701fa91 [release-4.1] Fix OIDC logout redirect uri (#6351)
* fix: oidc logout redirect uri

Signed-off-by: peng wu <2030047311@qq.com>

* fix: oidc unittest

Signed-off-by: peng wu <2030047311@qq.com>

---------

Signed-off-by: peng wu <2030047311@qq.com>
Co-authored-by: peng wu <2030047311@qq.com>
2025-02-08 10:11:13 +08:00
KubeSphere CI Bot
f89c55c484 [release-4.1] adjust the authorization rules for workspace roles (#6331)
adjust the authorization rules for workspace roles

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2025-01-07 09:39:25 +08:00
KubeSphere CI Bot
d2f811b1a1 [release-4.1] fix: make the prerelease version compatible (#6301)
fix: make the prerelease version compatible

Signed-off-by: wenhaozhou <wenhaozhou@yunify.com>
Co-authored-by: wenhaozhou <wenhaozhou@yunify.com>
2024-12-03 15:39:44 +08:00
KubeSphere CI Bot
b252832d20 [release-4.1] fix: resolve the apprelease upgrade issue (#6278)
* Update executor.go

Signed-off-by: 凌波 <lingbo@lingbohome.com>

* fix: apprelease upgrade

Signed-off-by: lingbo <lingbo@lingbohome.com>

* upgrade job on success, clean up apprelease status.message

Signed-off-by: lingbo <lingbo@lingbohome.com>

* adjust apprelease status.message

Signed-off-by: lingbo <lingbo@lingbohome.com>

* optimize: streamline apprelease upgrade logic

Signed-off-by: lingbo <lingbo@lingbohome.com>

* adjust upgrade code

Signed-off-by: lingbo <lingbo@lingbohome.com>

* Adding status.message during apprelease installations and upgrades

Signed-off-by: lingbo <lingbo@lingbohome.com>

* fix: Supplement the missing status in the apprelease life cycle.Message, solve the problem that the front-end status and message tips display do not match.

Signed-off-by: lingbo <lingbo@lingbohome.com>

---------

Signed-off-by: 凌波 <lingbo@lingbohome.com>
Signed-off-by: lingbo <lingbo@lingbohome.com>
Co-authored-by: 凌波 <lingbo@lingbohome.com>
2024-11-18 17:28:28 +08:00
KubeSphere CI Bot
e33f9125c3 [release-4.1] fix regression bug (#6270)
fix regression bug

Signed-off-by: hongming <coder.scala@gmail.com>
Co-authored-by: hongming <coder.scala@gmail.com>
2024-11-06 15:43:14 +08:00
KubeSphere CI Bot
d6ff99e5a2 [release-4.1] fix: there is a serious privilege escalation vulnerability in the kubectl terminal tool (#6254)
fix: there is a serious privilege escalation vulnerability in the kubectl terminal tool

Signed-off-by: lingbo <lingbo@lingbohome.com>
Co-authored-by: lingbo <lingbo@lingbohome.com>
2024-10-31 11:42:07 +08:00